CVE-2026-71376 — OS Command Injection Vulnerability in Cosminexus Component Container

Description (CNA)

OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, from 11-10 through 11-10-11, from 11-00 before 11-00-13, from 09-87 before 09-87-10, from 09-80 before 09-80-05, from 09-70 before 09-70-28, from 09-50 through 09-50-22, and from 09-00 through 09-00-18.

Affected (CNA)

Vendor / product	Versions
Hitachi / Cosminexus Component Container	affected 11-70-01 before 11-70-03; affected 11-60 before 11-60-03; affected 11-50 through 11-50-03; affected 11-40 through 11-40-03; affected 11-30 through 11-30-08; affected 11-20 before 11-20-10; affected 11-10 through 11-10-11; affected 11-00 before 11-00-13; affected 09-87 before 09-87-10; affected 09-80 before 09-80-05; affected 09-70 before 09-70-28; affected 09-50 through 09-50-22; affected 09-00 through 09-00-18

Vendor / product

Versions

Hitachi / Cosminexus Component Container

affected 11-70-01 before 11-70-03; affected 11-60 before 11-60-03; affected 11-50 through 11-50-03; affected 11-40 through 11-40-03; affected 11-30 through 11-30-08; affected 11-20 before 11-20-10; affected 11-10 through 11-10-11; affected 11-00 before 11-00-13; affected 09-87 before 09-87-10; affected 09-80 before 09-80-05; affected 09-70 before 09-70-28; affected 09-50 through 09-50-22; affected 09-00 through 09-00-18

CWE

CWE-78

References

https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-132/index.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.